security: scrub live credentials from tracked notes; point values at Vaultwarden

- replace real keys/passwords/tokens/connection strings with {{SECRET_*}}
  placeholders across 24 files (review-named 12 + noise-audit finds:
  WAQI/Dovecot/GPS/VPN subscriptions/Work runbooks/Plane API key)
- widen verifier: OPENSSH/RSA key headers, hyphenated sk-/prefixed sk-,
  credential assignments & table cells, telegram bot tokens, conn strings
- placeholder/default-value/config-name exemptions to kill doc FPs
- skip .obsidian plugin code and frozen Inbox-Clippings from value scan
- GIT_WORKFLOW: no git add ., verifier before commit, force-push exception
- final regression: 0 flagged in tracked scope (was 43)

03_Resources/Development/AI-ML/Azure-config.md

@@ -2,11 +2,11 @@
 created: 2026-01-05
 ---
 
-key : 272f337c0d2c4407b930bde5e9846072
+key : {{SECRET_AZURE_OPENAI_MYCHATGPT}}（实际值见 Vaultwarden）
 endpoint: https://my-chatgpt.openai.azure.com/
 
 ```bash
-export AZURE_OPENAI_API_KEY="272f337c0d2c4407b930bde5e9846072"
+export AZURE_OPENAI_API_KEY="{{SECRET_AZURE_OPENAI_MYCHATGPT}}"
 export AZURE_OPENAI_ENDPOINT="https://my-chatgpt.openai.azure.com/"
 ```
 ```
@@ -14,7 +14,7 @@ export AZURE_OPENAI_ENDPOINT="https://my-chatgpt.openai.azure.com/"
 ```.env
 # ChatGPT Settings (required)
 # Set the API Key from OpenAI
-OPENAI_API_KEY=272f337c0d2c4407b930bde5e9846072
+OPENAI_API_KEY={{SECRET_AZURE_OPENAI_MYCHATGPT}}
 # To use Azure OpenAI API, set `OPENAI_AZURE` to true and `CHATGPT_REVERSE_PROXY` to your completion endpoint
 # OPENAI_AZURE=false
 OPENAI_AZURE=true